On Fri, Jun 15, 2001 at 11:26:10AM +0100, Dan Jones wrote:
Eh, iptables/chains are almost identical, in firewalling sense, but not in masquerading.
Ahh, the script does both, masquerading is *completely* different, it confused the hell out of me hence downloading the script. I might hack the script later, make it slightly more tailored and possibly convert it to an init.d script as the old ipmasq in deb was.
Whats really cool with iptables is that you can mark packets in the PREROUTING table, and use netfilter to do cool things like rate-limiting. See Advanced-Routing-HOWTO for more on this.
And the incredible amount of information you can get by logging anything and everything....
Cheers,
Brett